18 matches found
Malicious code in yuzo (PyPI)
Source: kam193 deb22bdfdecb739735dd50a5e0e2fe8329ee260b7236db8112629d7516d081d4 Package contains an infostealer and is clearly prepared for using it. Different versions present different variations, newer are based on CStealer. The exfiltration target is a hardcoded discord webhook --- Category:...
Malicious code in upllib (PyPI)
Source: kam193 6207428c93f872f851e291726fc7a7384f9226b903c01a5a3f1545f82d66bf0b When importing the module and a specific file exists in the current directory, obfuscated code downloads and starts the next stage of obfuscated code cstealer infostealer --- Category: MALICIOUS - The campaign has...
Malicious code in sendtowev (PyPI)
Source: kam193 bee6e22271136b92077edad317e9a1e3eaa120bba73814159142d522cba12ced Package contains CStealer, a known infostealer, starting on importing the module. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-09-cstealer Reasons based on the...
Malicious code in rtcplogin (PyPI)
Source: kam193 2f986d2da01fbdba339f3d073a84dd5c57ba0aa19113574702160654f70f0620 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouilles Reasons based on the campaign: - infostealer -...
Malicious code in pyutiltool (PyPI)
Source: kam193 33b1b5a9f2482626b8ff1dc21fbf8da61082231e20f1b87060ab133957ce634f When importing the module and a specific file exists in the current directory, obfuscated code downloads and starts the next stage of obfuscated code cstealer infostealer --- Category: MALICIOUS - The campaign has...
Malicious code in package-lib8127 (PyPI)
Source: kam193 2e0e446a5a40a8c6a1ea1041fa0fc875ef0dab2a8ad10cc74e459221906e6851 Package contains CStealer, a known infostealer, starting on importing the module. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-09-cstealer Reasons based on the...
Malicious code in exflibrary (PyPI)
Source: kam193 95deb938eb8fd38976a38faf2fd2117318966fc829c080f35d6d999ff37d1236 When importing the module and a specific file exists in the current directory, obfuscated code downloads and starts the next stage of obfuscated code cstealer infostealer --- Category: MALICIOUS - The campaign has...
Malicious code in dlibex (PyPI)
Source: kam193 334235bba91ccf5f6b15b680b7e549e46b7de4a3007d30337b3e72a5124048b6 When importing the module and a specific file exists in the current directory, obfuscated code downloads and starts the next stage of obfuscated code cstealer infostealer --- Category: MALICIOUS - The campaign has...
Malicious code in rtcplogin (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2f986d2da01fbdba339f3d073a84dd5c57ba0aa19113574702160654f70f0620 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
MAL-2025-191858 Malicious code in rtcplogin (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2f986d2da01fbdba339f3d073a84dd5c57ba0aa19113574702160654f70f0620 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
MAL-2025-191859 Malicious code in rtcpstream (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 aa2920b4ae77a6e47bbf9ac8163f8d9a30d62966097d34989a36103a76178558 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
MAL-2025-191837 Malicious code in pyrtp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f77b4d5bf456d6805b724bbedc6baa9f7fb3cc95e6ab6aace6861bfcd56aec1f Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
MAL-2025-191860 Malicious code in rtcpy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 75bd7b21b8b27920b63ff14b07b761f57e72da9866682e4e49bd569e660215fd Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
Malicious code in rtcpy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 75bd7b21b8b27920b63ff14b07b761f57e72da9866682e4e49bd569e660215fd Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
MAL-2025-191682 Malicious code in aounitaounit2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 17a6f267b170cfb56ec403ff0364780d8adb80064476daffdded59f701b8b154 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
MAL-2025-191700 Malicious code in chicopute (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d495090103e9ff8ca138e9ad2b40556ce900f92d07ac058463eb58f42edacc85 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
Malicious code in zakuchienne (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6cab2f6ce1c1eec52747b1f7057550b9b35d3c4f6d8c04b51e37afd47c1e5625 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...
MAL-2025-191940 Malicious code in zakuchienne (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6cab2f6ce1c1eec52747b1f7057550b9b35d3c4f6d8c04b51e37afd47c1e5625 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...